| Package | Affected versions | Patched versions |
|---|---|---|
| x-pack | = 5.0.0= 5.0.1= 5.0.2= 5.1.1= 5.2.0= 5.2.1= 5.2.2= 5.3.0= 5.3.1= 5.3.2= 5.3.3= 5.4.0= 5.5.0= 5.5.2= 5.6.0 |
An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free